Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/jGoGrRIVsNQ_pZj5WNZaxpKg9Og.roa
File:                     jGoGrRIVsNQ_pZj5WNZaxpKg9Og.roa (raw, json)
Hash identifier:          iCkXKMy4MaJbLBnTXaEtiHr5OjCt4AgcnmXZUdtWouc=
Subject key identifier:   8C:6A:06:AD:12:15:B0:D4:3F:A5:98:F9:58:D6:5A:C6:92:A0:F4:E8
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       2B
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/jGoGrRIVsNQ_pZj5WNZaxpKg9Og.roa
Signing time:             Mon 01 Nov 2021 01:28:44 +0000
ROA not before:           Mon 01 Nov 2021 01:28:44 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     55900
IP address blocks:        202.12.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Nov  1 01:28:44 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=8C6A06AD1215B0D43FA598F958D65AC692A0F4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:eb:06:d2:eb:47:ff:39:30:f4:c1:2c:a1:
                    bc:f1:b5:73:f8:b6:30:af:fa:52:da:fb:8a:2b:3e:
                    ba:16:33:16:54:6a:8b:fe:df:db:0b:ce:0d:67:a8:
                    bc:ed:e1:93:87:14:e0:cf:e0:07:c0:8d:4d:fa:e7:
                    52:71:62:14:cb:53:dd:d9:70:8d:13:5a:a6:ba:84:
                    6b:7c:82:9b:0d:a4:0b:b8:7b:e4:12:5b:00:20:4c:
                    f5:c4:ba:76:6c:52:0f:8d:5f:c2:fb:22:ba:60:0a:
                    fa:61:f4:0e:fa:91:8d:15:50:11:db:2b:70:43:01:
                    31:cb:7c:dc:32:aa:80:53:37:09:21:cd:9b:92:81:
                    e2:92:f9:f1:56:98:22:6f:a7:72:75:c4:23:be:85:
                    c2:e8:55:41:9f:1a:54:f0:45:74:7e:cb:92:75:17:
                    39:38:38:49:66:4c:e4:4b:78:fa:29:0e:90:a2:d1:
                    a3:4b:a7:ca:0e:1a:b1:51:fa:7e:2c:9d:15:72:ab:
                    a4:84:ac:c6:a0:1e:b8:94:1f:53:82:e7:3f:11:2c:
                    9d:9b:92:f0:68:0f:21:3a:91:93:49:35:5e:fe:d8:
                    ea:e8:06:68:e4:6e:11:47:ea:40:23:ae:79:17:3e:
                    f0:99:9e:19:ae:fa:8c:40:7d:d6:a5:90:50:61:07:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:06:AD:12:15:B0:D4:3F:A5:98:F9:58:D6:5A:C6:92:A0:F4:E8
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/jGoGrRIVsNQ_pZj5WNZaxpKg9Og.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:aa:cb:0a:01:fc:a0:83:a6:b4:2b:dd:f7:b0:4e:5b:c8:1b:
         96:41:51:15:ce:44:85:4a:f9:a3:56:8c:07:b8:d0:92:47:fc:
         d1:ab:eb:9e:be:bb:12:42:14:6c:4d:e7:98:93:0f:30:9f:95:
         36:54:86:0e:42:d4:ac:13:82:6a:66:ef:b5:33:af:3c:2f:ec:
         a4:e9:7f:49:e3:01:5b:0d:2a:58:ef:fd:4d:88:5d:6b:b1:16:
         09:56:e7:2e:3e:5e:7b:76:27:f0:c7:5a:a9:80:6d:1f:e1:da:
         bc:b6:c7:8d:f4:a2:e4:af:ae:4f:50:23:6d:3d:0b:22:55:4a:
         e4:b8:ed:be:5c:81:c4:34:ca:a1:46:33:38:c1:40:5a:4a:de:
         8f:99:1f:dd:88:03:ca:17:7f:c9:92:f4:48:11:2d:0e:aa:50:
         70:78:62:95:9a:f4:4d:ca:45:d3:32:3b:74:a0:5b:73:e8:0b:
         2f:7d:bc:4e:4c:52:6f:75:3d:cf:c2:d8:4b:6e:b8:fc:ff:cc:
         4d:85:d6:65:2d:88:0d:db:87:7c:7c:1c:60:7e:c0:2a:90:e2:
         5e:89:e6:39:55:4c:00:62:0c:8d:90:18:fa:eb:6e:cb:94:91:
         bb:af:ec:18:82:c6:a1:56:dc:eb:73:ca:6f:ae:3f:21:bb:02:
         83:10:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org